Skip to content

Instantly share code, notes, and snippets.

@alon710

alon710/CVE-2026-70007.md

Created October 13, 2026 23:30
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save alon710/dba319358e490a35547519343d916bb8 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save alon710/dba319358e490a35547519343d916bb8 to your computer and use it in GitHub Desktop.
Download ZIP
CVE-2026-70007: CVE-2026-70007: Out-of-Bounds Write Vulnerability in .NET Framework and WPF Subsystem - CVE Security Report
Raw
CVE-2026-70007.md

CVE-2026-70007: CVE-2026-70007: Out-of-Bounds Write Vulnerability in .NET Framework and WPF Subsystem

CVSS Score: 8.8 Published: 2026-10-13 Full Report: https://cvereports.com/reports/CVE-2026-70007

Summary

An out-of-bounds write vulnerability in Microsoft .NET Framework, .NET runtime, and Visual Studio allows unauthenticated remote attackers to execute arbitrary code via crafted pixel-shader bytecode or auto-converted clipboard payloads.

TL;DR

A heap-based out-of-bounds write vulnerability (CWE-787) in the Windows Presentation Foundation (WPF) graphics subsystem (CPSTrans::Initialize) and Clipboard API routines allows remote code execution when a targeted application processes malicious graphics assets or clipboard data.

Technical Details

  • CWE ID: CWE-787 (Out-of-bounds Write)
  • Attack Vector: Network (AV:N)
  • CVSS v3.1 Score: 8.8 (High)
  • EPSS Score: Pending Baseline
  • Impact: Remote Code Execution (C:H/I:H/A:H)
  • Exploit Status: Unweaponized / No Public PoC
  • CISA KEV Status: Not Listed

Affected Systems

  • Microsoft .NET 8.0
  • Microsoft .NET 9.0
  • Microsoft .NET 10.0
  • Microsoft .NET 11.0
  • Microsoft .NET Framework 3.5
  • Microsoft .NET Framework 4.6.2 / 4.7 / 4.7.1 / 4.7.2
  • Microsoft .NET Framework 4.8
  • Microsoft .NET Framework 4.8.1
  • Microsoft Visual Studio 2022
  • Microsoft Visual Studio 2026
  • .NET 8.0: >= 8.0.0, < 8.0.32 (Fixed in: 8.0.32)
  • .NET 9.0: >= 9.0.0, < 9.0.21 (Fixed in: 9.0.21)
  • .NET 10.0: >= 10.0.0, < 10.0.13 (Fixed in: 10.0.13)
  • .NET 11.0: >= 11.0.0, < 11.0.0-rc.2 (Fixed in: 11.0.0-rc.2)
  • .NET Framework 4.8.1: < 4.8.9363.0 (Fixed in: 4.8.9363.0)
  • Visual Studio 2022: < 17.14.42 (Fixed in: 17.14.42)

Mitigation

  • Apply official Microsoft security updates for affected .NET, .NET Framework, and Visual Studio products.
  • Enforce least-privilege user execution policies to limit the potential impact of code execution.
  • Monitor process trees for anomalous child process spawning from WPF hosting binaries like PresentationHost.exe.

Remediation Steps:

  1. Identify all systems running vulnerable versions of .NET runtime (8.0, 9.0, 10.0, 11.0), .NET Framework, or Visual Studio.
  2. Deploy Microsoft Security Updates released on October 13, 2026 via Windows Update, WSUS, or enterprise deployment tools.
  3. Verify that .NET 8.0 is updated to >= 8.0.32, .NET 9.0 to >= 9.0.21, .NET 10.0 to >= 10.0.13, and .NET 11.0 to >= 11.0.0-rc.2.
  4. Ensure Visual Studio 2022 is updated to version 17.14.42 or higher.

References

Generated by CVEReports - Automated Vulnerability Intelligence

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment